Security

Your data, locked down.

CheckOn holds sales, staff and pay data, and records that matter to your EHO. This is how we keep it safe.

Every account is separate

Each business’s data is walled off at the database level. A user can only ever read data for the venues they have been given access to.

Access by role

Owners, HR, regional managers, venue managers, supervisors and staff each see only what their role needs.

Pay stays private

Pay rates live in a separate locked area that only HR and people HR authorises can open. Managers get totals, never individual rates.

Two-step sign-in

Owners, HR and admins sign in with a password and an authenticator app code. Staff can sign in with a one-time link.

Everything is logged

Sign-ins, pay rate views, record changes and exports are logged with who, what and when.

Encrypted everywhere

All traffic is encrypted in transit, and data is encrypted at rest. [Confirm hosting region before launch: UK or EU.]

UK GDPR

You stay in control of your staff and customer data. We act as your data processor and sign a data processing agreement with every client. You can export or delete your data at any time.

Reporting a security issue

If you think you have found a security problem, email security@checkonhq.co.uk. We will reply within two working days.

Before launch: confirm hosting region, sub-processors list, backup schedule and incident process, and have the privacy policy and data processing agreement reviewed by a solicitor.